[Openid-specs-ab] Fragment size limitation

Nat Sakimura sakimura at gmail.com
Mon Jun 4 11:54:12 UTC 2012


A bad news.

IE8's limit for the entire URL including the fragment is 2083 bytes.
When it gets to 2084 bytes, the length of the fragment becomes zero.
When it gets to 2085 bytes, it will be an error.

For iPhone safari or android browser, this kind of limitation does not apply.

We should note that if claims_in_id_token is used, the server should
be careful on this size limit.


Nat Sakimura (=nat)
Chairman, OpenID Foundation

More information about the Openid-specs-ab mailing list